Best Of

Thats where your going wrong when I say “one port on Zywall and VLAN the other subnets on it” I mean use ONE port like GE6 add a VLAN ON GE6 and another VLAN ON GE6 you don't need GE7 or 8

My reply may not be exactly what you asked for, but it is as close as I could get on short notice. A similar question was asked and replied to in the following discussion from 2020-01-23:

Yes that could be one reason because you don't have either USG having the WAN IP behind other NAT routers that you need to forward ports.

Have you a rule to allow inbound UDP port 500, 1701, 4500 and protocol 50 from WAN to Zywall?

that is the problem! i dont get the logs at all, i disabled the firewall on my ISP router for sure and nothing. i have included the screenshot from my policy control rules.

Thank you for your time.

The ipsec site to site vpn gives that the connected is established.

Tunnel [GW_To_OldOffice:Con_To_OldOffice:0x6884d946] built successfully


Office 2 (New_Office):

Office1 routing:

Office2 routing:

By default windows will not allow another subnet to access a shared folder there are two ways around this but as to have disable the windows firewall this is likely but the problem.

You need and firewall rule on Office 2

from LAN1

to IPSec_VPN

You need and firewall rule on Office 1

from IPSec_VPN

to LAN2

Have you tested the shared folder on the same network?

Windows firewall might be blocking it

test by

\\192.168.2.33